The Opportunity

The Cloud Architect shapes how MHK's regulated SaaS platform grows, stays secure and stays reliable. Within the Cloud Platform Engineering organization, you will define and evolve the architecture of a secure, highly available, multi-account AWS platform, owning architecture standards, reference designs, resilience patterns and technical direction across platform and application engineering teams.

You will assess existing systems, define pragmatic migration and modernization paths, and turn business and product needs into target-state AWS architectures. You will set platform standards and make architecture recommendations within the cloud domain, while implementation is delivered in partnership with platform engineering, security, operations, data and application teams, so the platform becomes more scalable, secure, reliable, operable, cost-aware and compliant.

Hybrid: This hybrid role is based in Tampa, FL. Candidates must reside in or be willing to relocate to the Tampa area within 90 days of start. MHK will offer relocation assistance for the right candidate.

Position Duties

Cloud Architecture and Technical Strategy

Define target-state AWS architectures, reference architectures and decision records for secure, scalable, cloud-native SaaS platforms, and lead architecture reviews that translate product, engineering and enterprise roadmaps into implementable cloud designs.
Design modernization strategies spanning serverless services, Amazon ECS and AWS Fargate, EC2 Linux workloads, APIs and event-driven components, and establish standards for availability, scalability, performance, capacity, service boundaries, tenant isolation and operational readiness.
Guide multi-region resilience and disaster-recovery architecture, including backup ownership, RTO and RPO targets, failover approaches and restore testing.

Security, Compliance and Risk Architecture

Design cloud controls that support HIPAA, SOC 2 and HITRUST requirements, partnering with security and compliance teams on control-to-code mappings, audit evidence, control walkthroughs and penetration-test remediation.
Define patterns for IAM, permission boundaries, service control policies, KMS encryption, Secrets Manager, Parameter Store and least-privilege access, and establish cloud security posture and vulnerability-management patterns using services such as AWS Config, Security Hub, Inspector, GuardDuty and CloudTrail.

Networking, Data and Platform Governance

Define enterprise AWS networking patterns (Transit Gateway, Site-to-Site VPN, Direct Connect, PrivateLink) and set direction for Amazon RDS for MySQL and Aurora, DynamoDB and ElastiCache, including durability, backup, recovery, replication and performance tradeoffs.
Own cloud landing-zone standards and multi-account governance across AWS Organizations and Control Tower, and create reusable Terraform module standards covering versioning, remote state, code review, drift detection, testing and safe change management.

Modernization, Transformation and Platform Enablement

Assess current-state environments and create phased transformation roadmaps, with migration patterns for rehosting, replatforming, refactoring, containerization, serverless adoption and legacy retirement.
Establish platform golden paths and self-service provisioning patterns that help engineering teams adopt approved AWS architectures consistently and securely.
Define observability architecture across CloudWatch and Datadog, and improve operational readiness through patching, maintenance-window, change-management, exception and customer-notification patterns.
Lead or facilitate complex incident reviews, and evaluate and pilot AI-assisted SRE or DevOps capabilities where they can safely improve incident triage, diagnosis or remediation.
Balance cost, performance, reliability and security in architecture decisions, and contribute to rightsizing, savings-plan, reservation and tag-based cost-attribution initiatives.
Guide platform and application teams through implementation, using Terraform, Python, Bash and lightweight automation to prove patterns and remove barriers, and provide architectural input to GitHub Actions or other delivery pipelines. This is not primarily a CI/CD administration role.